CN113079488B - Information interaction method, device and equipment - Google Patents
Information interaction method, device and equipment Download PDFInfo
- Publication number
- CN113079488B CN113079488B CN202110371375.9A CN202110371375A CN113079488B CN 113079488 B CN113079488 B CN 113079488B CN 202110371375 A CN202110371375 A CN 202110371375A CN 113079488 B CN113079488 B CN 113079488B
- Authority
- CN
- China
- Prior art keywords
- service
- key
- vehicle
- management platform
- random number
- Prior art date
- Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
- Active
Links
- 230000003993 interaction Effects 0.000 title claims abstract description 97
- 238000000034 method Methods 0.000 title claims abstract description 64
- 230000006854 communication Effects 0.000 claims abstract description 113
- 238000004891 communication Methods 0.000 claims abstract description 112
- 238000012790 confirmation Methods 0.000 claims description 20
- 238000012545 processing Methods 0.000 claims description 12
- 230000006870 function Effects 0.000 claims description 5
- 238000004590 computer program Methods 0.000 claims description 3
- 238000004364 calculation method Methods 0.000 abstract description 9
- 230000008569 process Effects 0.000 description 16
- 230000000694 effects Effects 0.000 description 6
- 238000004422 calculation algorithm Methods 0.000 description 5
- 230000006855 networking Effects 0.000 description 5
- 238000012795 verification Methods 0.000 description 4
- 230000005540 biological transmission Effects 0.000 description 3
- 230000008878 coupling Effects 0.000 description 3
- 238000010168 coupling process Methods 0.000 description 3
- 238000005859 coupling reaction Methods 0.000 description 3
- 230000007246 mechanism Effects 0.000 description 3
- 230000001413 cellular effect Effects 0.000 description 2
- 238000000354 decomposition reaction Methods 0.000 description 2
- 238000010586 diagram Methods 0.000 description 2
- 238000005516 engineering process Methods 0.000 description 2
- 230000006798 recombination Effects 0.000 description 2
- 238000005215 recombination Methods 0.000 description 2
- 238000013475 authorization Methods 0.000 description 1
- 230000009286 beneficial effect Effects 0.000 description 1
- 238000013461 design Methods 0.000 description 1
- 238000011161 development Methods 0.000 description 1
- 238000012986 modification Methods 0.000 description 1
- 230000004048 modification Effects 0.000 description 1
- 230000003287 optical effect Effects 0.000 description 1
- 238000013433 optimization analysis Methods 0.000 description 1
Images
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04W—WIRELESS COMMUNICATION NETWORKS
- H04W4/00—Services specially adapted for wireless communication networks; Facilities therefor
- H04W4/30—Services specially adapted for particular environments, situations or purposes
- H04W4/40—Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P]
- H04W4/44—Services specially adapted for particular environments, situations or purposes for vehicles, e.g. vehicle-to-pedestrians [V2P] for communication between vehicles and infrastructures, e.g. vehicle-to-cloud [V2C] or vehicle-to-home [V2H]
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L9/00—Cryptographic mechanisms or cryptographic arrangements for secret or secure communications; Network security protocols
- H04L9/08—Key distribution or management, e.g. generation, sharing or updating, of cryptographic keys or passwords
- H04L9/0861—Generation of secret information including derivation or calculation of cryptographic keys or passwords
- H04L9/0869—Generation of secret information including derivation or calculation of cryptographic keys or passwords involving random numbers or seeds
Abstract
The invention provides an information interaction method, an information interaction device and information interaction equipment, wherein the method of an automobile service platform side comprises the following steps: receiving a service request sent by a vehicle; and interacting with the service management platform according to the service request, obtaining a communication key for encrypting the service when the vehicle and the edge computing node transmit the service, and sending the communication key to the vehicle so as to encrypt and use the vehicle when the vehicle subsequently performs service communication. The scheme of the invention can reduce the calculation pressure of the edge side and improve the efficiency of key interaction.
Description
Technical Field
The invention relates to the technical field of vehicle networking, in particular to an information interaction method, device and equipment.
Background
The MEC (edge computing technology) introduces data, application and intelligence to the edge side of the base station, on one hand, the business is deployed at the edge node by reducing data transmission routing nodes to reduce end-to-end communication time delay, and auxiliary driving information such as alarm and the like is sent to an on-board unit (OBU) in emergency through local computing of an LTE cellular network and an MEC vehicle-connected platform. On the other hand, as a local service hosting environment, the MEC can support deployment of local vehicle networking services with more geographic and regional characteristics and higher throughput, for example, path optimization analysis, driving and parking guidance, safety auxiliary information push, regional vehicle service guidance and the like can be realized through an MEC vehicle networking platform. Consequently, MEC has become an integral part of cellular network based C-V2X communication solutions.
Although the MEC expands the computing resources to the network edge, which greatly improves the transmission efficiency, with the popularization of the MEC technology, one of the most concerned problems of the user in the scene of the vehicle-to-MEC secure communication vehicle networking is how to securely establish the connection between the vehicle and the MEC, whether the communication message is secure, and the combination of the MEC authentication, authentication and service scene, etc. are technical difficulties that need to be solved at present.
In a mobile edge computing scenario, the mobile terminal will be exposed to a more complex environment, and thus many security solutions originally used for cloud computing may no longer be suitable for mobile edge computing. Authentication of network entities such as gateways at different levels is also a security problem to be considered, and therefore, the MEC system must solve security problems such as authentication and authorization. Meanwhile, the communication process based on the MEC involves numerous content sharing and computing cooperation, and privacy protection of users becomes a challenge to be solved urgently in the future development process of the MEC.
Disclosure of Invention
The invention provides an information interaction method, device and equipment. The key interaction process is carried out on the vehicle service platform at the cloud side in a centralized manner, and is not carried out on the vehicle side any more, so that the interaction safety is improved, the calculation pressure on the edge side is reduced, and the key interaction efficiency is improved.
In order to solve the technical problems, the technical scheme of the invention is as follows:
an information interaction method is applied to a vehicle service platform and comprises the following steps:
receiving a service request sent by a vehicle;
and interacting with a service management platform according to the service request to obtain a communication key for encrypting the service when the vehicle transmits the service with the edge computing node.
Optionally, the obtaining, according to the interaction between the service request and the service management platform, a communication key used for encrypting a service when the vehicle transmits the service to the edge computing node includes:
sending a first key interaction request to the service management platform according to the service request;
receiving first confirmation information fed back by the service management platform according to the first key interaction request; the first acknowledgement information includes: a second random number generated by the service management platform;
and interacting with the service management platform according to the first confirmation information to obtain a communication key.
Optionally, the first key interaction request includes: the conversation comprises a conversation identifier, a vehicle identifier, vehicle position information and a first random number.
Optionally, the obtaining a communication key according to the interaction between the first confirmation information and the service management platform includes:
sending a second key interaction request to the service management platform according to the first confirmation information, wherein the second key interaction request is used for indicating the service management platform to generate a communication key;
and receiving the communication key fed back by the service management platform.
Optionally, the second key interaction request includes:
a third random number encrypted using the public key;
vehicle identification information encrypted using a negotiation key, the negotiation key enc _ key ═ Fuc (a first random number, a second random number, a third random number);
wherein the third random number is a random number generated by the vehicle service platform, and Fuc is a key generation function.
Optionally, generating the communication key includes:
and encrypting a fourth random number by using the negotiation key to obtain a key, wherein the fourth random number is a random number generated by the service management platform.
The embodiment of the invention also provides an information interaction method, which is applied to the edge computing node and comprises the following steps:
receiving a request message of a vehicle; the request message is encrypted by using a communication key, and the communication key is obtained after the vehicle service platform interacts with the service management platform according to a service request sent by the vehicle;
requesting a communication key from the service management platform according to the request message;
and receiving a communication key issued by the service management platform.
Optionally, the information interaction method further includes: and decrypting the request message sent by the vehicle by using the communication key.
Optionally, the information interaction method further includes: and after the service with the vehicle is finished, disconnecting the communication connection with the vehicle and canceling the communication key.
The embodiment of the invention also provides an information interaction device, which is applied to a vehicle service platform, and the device comprises:
the receiving and sending module is used for receiving a service request sent by a vehicle;
and the processing module is used for interacting with the service management platform according to the service request to obtain a communication key for encrypting the service when the vehicle and the edge computing node transmit the service.
An embodiment of the present invention further provides a vehicle service platform, including: the information interaction device is described above.
The embodiment of the invention also provides an information interaction device, which is applied to the edge computing node, and the device comprises:
the receiving and sending module is used for receiving a request message of a vehicle; the request message is encrypted by using a communication key, and the communication key is obtained after the vehicle service platform interacts with the service management platform according to a service request sent by the vehicle;
the processing module is used for requesting a communication key from the service management platform according to the request message;
the receiving and sending module is also used for receiving the communication key issued by the service management platform.
Embodiments of the present invention further provide an edge computing center MEC, including the information interaction apparatus as described above.
An embodiment of the present invention further provides a processing device, including: a processor, a memory storing a computer program which, when executed by the processor, performs the method as described above.
Embodiments of the present invention also provide a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the method as described above.
The scheme of the invention at least comprises the following beneficial effects:
receiving a service request sent by a vehicle through a vehicle service platform; and interacting with the service management platform according to the service request to obtain a communication key, issuing the communication key to the vehicle so as to encrypt and use the vehicle during subsequent service communication, and performing the key interaction process on the core cloud side in a centralized manner without performing the key interaction process on the vehicle side, so that the interaction safety is improved, the calculation pressure on the edge side is reduced, and the key interaction efficiency is improved.
Drawings
FIG. 1 is a flow chart of an information interaction method of a vehicle service platform side according to an embodiment of the invention;
FIG. 2 is a schematic diagram of an information interaction system architecture according to an embodiment of the present invention;
FIG. 3 is a flowchart illustrating an information interaction method at an edge computing node according to an embodiment of the present invention;
FIG. 4 is a flowchart illustrating a specific information interaction method according to an embodiment of the present invention;
fig. 5 is a block diagram of an information interaction apparatus according to an embodiment of the present invention.
Detailed Description
Exemplary embodiments of the present disclosure will be described in more detail below with reference to the accompanying drawings. While exemplary embodiments of the present disclosure are shown in the drawings, it should be understood that the present disclosure may be embodied in various forms and should not be limited to the embodiments set forth herein. Rather, these embodiments are provided so that this disclosure will be thorough and complete, and will fully convey the scope of the disclosure to those skilled in the art.
As shown in fig. 1, an embodiment of the present invention provides an information interaction method applied to a vehicle service platform, including:
and step 12, interacting with a service management platform according to the service request to obtain a communication key for encrypting the service when the vehicle transmits the service with the edge computing node.
In this embodiment, the vehicle service platform may be a TSP platform of a vehicle remote service provider, or may be another vehicle service platform on the core cloud side, and receives a service request sent by a vehicle through the vehicle service platform; and interacting with the service management platform according to the service request to obtain a communication key, issuing the communication key to the vehicle so as to encrypt and use the vehicle during subsequent service communication, and performing the key interaction process on the cloud side in a centralized manner without performing the key interaction process on the vehicle side, so that the interaction safety is improved, the calculation pressure on the edge side is reduced, and the key interaction efficiency is improved.
In an alternative embodiment of the present invention, as shown in fig. 2, step 12 may include:
step 121, sending a first key interaction request to a service management platform according to the service request; the first key exchange request comprises: the conversation comprises a conversation identifier, a vehicle identifier, vehicle position information and a first random number.
Step 122, receiving first confirmation information fed back by the service management platform; the first acknowledgement information includes: a second random number generated by the service management platform.
And step 123, interacting with the service management platform according to the first confirmation information to obtain a communication key.
In this embodiment, in steps 121 to 123, the TSP platform and the service management platform determine the communication key through the request and confirmation interaction process, so as to improve the security of the current communication and the subsequent communication.
In an alternative embodiment of the present invention, step 123 may include:
step 1231, sending a second key interaction request to the service management platform according to the first confirmation information; the second key interaction request is used for indicating the service management platform to generate a communication key; the second key exchange request comprises: a third random number Pre-Master encrypted using the public key; vehicle identification information encrypted using a negotiation key, the negotiation key enc _ key ═ Fuc (a first random number, a second random number, a third random number); wherein, Pre-Master is the random number generated by the TSP platform, and Fuc is the key generation function.
And step 1232, receiving the communication key fed back by the service management platform.
Here, generating the traffic key may include:
and encrypting a fourth random number by using the negotiation key to obtain a key, wherein the fourth random number is a random number generated by the service management platform.
In the embodiment, the TSP platform of the car factory calculates and generates a random number Pre-master, encrypts the random number by using a locally stored certificate public key and sends the encrypted random number to a service management platform at a service core cloud side;
at this time, the TSP platform of the car factory already obtains all the information required for calculating the negotiation key: two plaintext random numbers, namely a first random number random _ C and a second random number random _ S, and Pre-master generated by self calculation are calculated to obtain a negotiation key: enc _ key ═ Fuc (random _ C, random _ S, Pre-Master);
and the Tsp platform sends the encrypted Pre-master and simultaneously carries out AES symmetric encryption on the unique vehicle identifier needing applying for the key by using the generated enc _ key, and sends the encrypted unique vehicle identifier to the service management platform for handshake verification.
The parameters sent by the TSP to the service management platform are: TSP public key encrypted Pre-master + encrypted _ handed _ message.
The service management platform decrypts the encrypted Pre-master data by using a private key, and calculates to obtain a negotiation key based on two plaintext random numbers random _ C and random _ S exchanged before: enc _ key ═ Fuc (random _ C, random _ S, Pre-Master);
decrypting the encrypted _ handover _ message sent by the TSP platform of the car factory according to the enc _ key, and verifying the correctness of the data and the key; and storing the decrypted vehicle id and the enc _ key in an associated manner.
The service management platform generates a section of random data, encrypts the random data by using an AES algorithm by adopting a negotiation key enc _ key, and sends the encrypted random data to the TSP platform as an encrypted _ enhanced _ message, namely a communication key.
In an optional embodiment of the present invention, the information interaction method further includes: and sending the communication key to the vehicle.
And the TPS platform of the automobile factory decrypts the encrypted _ message by using the enc _ key, and if the encrypted _ message can be decrypted correctly, the encrypted _ message indicates that the verification is passed and the key interaction is primarily completed.
And the TSP platform of the car factory issues an enc _ key to the car platform by using the existing safe communication mode and informs the car platform that the business can be started. Subsequent vehicle interactions with the MEC may all be symmetrically encrypted using the enc _ key and AES algorithms.
According to the embodiment of the invention, the communication key is temporarily generated by using the vehicle service platform on the core cloud side and is issued to the vehicle for subsequent communication, key exchange is not performed on the vehicle side any more, the interaction safety is improved, the key interaction process is performed in a cloud side, the calculation pressure on the edge side is reduced, and the key interaction efficiency is improved. And a symmetric encryption mechanism is used at the vehicle end and the edge side, so that the encryption efficiency is improved.
As shown in fig. 3, an embodiment of the present invention further provides an information interaction method applied to an edge computing node, where the method includes:
and step 33, receiving the communication key issued by the service management platform.
In the embodiment, after receiving the communication key, the vehicle applies for communication with the edge computing node (such as the edge computing center MEC) with the vehicle identity information + the service information (using the communication key enc _ key symmetric encryption), so that the vehicle adopts the communication key temporarily generated by the vehicle service platform for communication, and the safety of service interaction is improved.
In an optional embodiment of the present invention, the information interaction method may further include:
and step 34, decrypting the request message sent by the vehicle by using the communication key.
In this embodiment, after obtaining the vehicle request message, the edge computing center MEC applies for obtaining the vehicle communication key from the service management platform of the service core cloud. And the service management platform confirms the vehicle information and the electronic fence information and judges whether to issue the communication key, if not, an error is reported, and if so, the communication key is issued.
In an optional embodiment of the present invention, the information interaction method further includes:
and step 35, after the service with the vehicle is finished, disconnecting the communication connection with the vehicle and canceling the communication key.
In this embodiment, the service management platform authenticates the vehicle authentication information uploaded by the MEC, and approves the vehicle location and the MEC administration location. And the MEC receives the communication key issued by the service core cloud, caches the communication key locally, and decrypts the vehicle request message. After the vehicle request message is correctly decrypted, the MEC informs the service management platform of formally starting the service. The vehicle is in encrypted communication with the MEC (AES symmetric encryption). And after the service is finished, the vehicle initiates a request to disconnect the MEC. The MEC locally de-registers the key. And the MEC informs the service management platform of the completion of the vehicle service. And the service management platform logs off the communication key. The vehicle notifies the plant TSP platform of the end of service. And the TSP platform of the car factory informs the service management platform of service end and cancels the secret key. The service management platform actively informs the edge MEC to log off. The service management platform regularly cleans keys which are not logged out for a long time and informs the corresponding edge MEC.
As shown in fig. 4, it is a specific implementation flow of the above method:
1. the vehicle initiates a service start request to the TSP platform of the vehicle factory:
the TPS platform and the service core cloud platform use the original safe communication mode for the communication and the subsequent communication;
2. the TSP platform of the car factory initiates a key interaction application to the service core cloud platform:
the session id + the transmission vehicle id + the position information + the random number random _ C;
3. the service core cloud returns confirmation key interaction and a random number random _ S for subsequent key negotiation;
4. and (3) carrying out key interaction on the TSP platform of the car factory:
the TSP platform of the car factory generates a random number Pre-master through calculation, encrypts the random number by using a locally stored certificate public key and sends the encrypted random number to the service core cloud platform;
at this time, the TSP platform of the car factory already obtains all the information required for calculating the negotiation key: calculating two plaintext random numbers random _ C and random _ S and a Pre-master generated by self calculation to obtain a negotiation key: enc _ key ═ Fuc (random _ C, random _ S, Pre-Master);
and the TSP platform sends the encrypted Pre-master and simultaneously carries out AES symmetric encryption on the unique vehicle identification needing applying the key by using the generated enc _ key, and sends the encrypted unique vehicle identification to the service platform for handshake verification.
The parameters sent by the TSP to the service cloud are: the TSP public key encrypted Pre-master + encrypted _ hand _ message;
5. service core cloud key interaction:
the service core cloud decrypts the encrypted Pre-master data by using a private key, and calculates to obtain a negotiation key based on two plaintext random numbers random _ C and random _ S exchanged before: enc _ key ═ Fuc (random _ C, random _ S, Pre-Master);
decrypting the encrypted _ handover _ message sent by the TSP platform of the car factory according to the enc _ key, and verifying the correctness of the data and the key; and storing the decrypted vehicle id and the enc _ key in an associated manner.
The service core cloud generates a section of random data, adopts a negotiation key enc _ key, encrypts the random data by using an AES algorithm, and sends the encrypted random data to the TSP platform as encrypted _ enhanced _ like _ message.
6. And (3) finishing key interaction, issuing vehicles:
the TPS platform of the automobile factory decrypts encrypted _ message by using enc _ key, if the encrypted _ message can be decrypted correctly, verification is passed, and key interaction is completed preliminarily;
and the TSP platform of the car factory issues an enc _ key to the car platform by using the existing safe communication mode and informs the car platform that the business can be started. The subsequent interaction of the vehicle and the MEC can use the enc _ key and the AES algorithm to carry out symmetric encryption;
7. after the vehicle receives the communication key, the vehicle carries the vehicle identity information plus the service information (the communication key enc _ key symmetric encryption is used) to apply for communication with the MEC;
8. and after the edge cloud MEC obtains the vehicle communication request, applying to the service core cloud to obtain the vehicle communication key. The core cloud confirms the vehicle information and the electronic fence information, judges whether to issue a communication key enc _ key or not, and if not, reports an error, and if so, issues the communication key;
9. the core cloud authenticates the vehicle authentication information uploaded by the MEC, and approves the vehicle position and the MEC administration position;
10. the edge cloud MEC receives a communication key enc _ key issued by the service core cloud, caches the key locally, and decrypts the vehicle request message;
11. after the vehicle request message is correctly decrypted, the edge MEC informs a service core cloud service to formally start;
12. the vehicle and the edge MEC carry out encryption communication (AES symmetric encryption);
13. after the service is completed, the vehicle initiates a request to disconnect the connection with the MEC;
14. an edge cloud MEC locally logs off a key;
15. the edge cloud MEC informs a service core cloud of the completion of the vehicle service;
16. the service core cloud logs off the communication key;
17. the vehicle informs the truck manufacturer of the completion of the TSP platform service;
18. the TSP platform of the car factory informs the service core cloud service of ending and logs off the key;
19. the service core cloud actively informs the edge MEC to logout;
20. and the service core cloud regularly cleans keys which are not logged out for a long time and informs the corresponding edge MEC.
In the embodiment of the invention, the key interaction process is deployed at the cloud end and is completed by the TSP (vehicle remote service provider) and the service core cloud, the key interaction process is completed by using an asymmetric encryption mode, and the communication public and private keys are stored in the service core cloud and the TSP platform of the vehicle factory, so that the interaction safety is ensured.
And when the vehicle starts a service, the MEC acquires a communication key from the service core cloud platform through the identifier reported by the vehicle. And the service core cloud platform compares the vehicle position reported by the TSP with the MEC coverage position, judges whether the request is legal or not, and issues the legal request if the request is legal. And the MEC acquires the communication key and then caches the communication key locally. When a vehicle starts a service, the MEC reports the service start of the service core cloud platform service, and the validity period of the communication key starts; when the vehicle finishes the service, the vehicle reports the MEC and the TSP platform of the vehicle networking respectively, after the MEC platform receives the request, the MEC platform locally cancels the communication key and reports the service core cloud platform, the service core cloud platform marks the service end and cancels the communication key at the service core cloud platform; and the TSP platform of the internet of vehicles receives a service end notice reported by the vehicles, immediately informs the service core platform to logout the communication key, the service core cloud platform confirms whether to logout locally, if logout is performed, processing is not performed, and if not, the edge MEC is informed to logout the communication key.
According to the embodiment of the invention, the key interaction process is carried out in a centralized manner at the cloud end, so that the interaction safety is improved, the calculation pressure at the edge side is reduced, and the key interaction efficiency is improved. And a symmetric encryption mechanism is used at the vehicle end and the edge side, so that the encryption efficiency is improved. The perfect key life cycle management mechanism limits the effective time of the key to be in a service interaction process and ensures that the key is correctly cancelled.
As shown in fig. 5, an embodiment of the present invention further provides an information interaction apparatus 50 applied to a vehicle service platform, where the apparatus includes:
the transceiving module 51 is used for receiving a service request sent by a vehicle;
and the processing module 52 is configured to interact with the service management platform according to the service request, and obtain a communication key used for encrypting the service when the vehicle transmits the service with the edge computing node.
Optionally, the obtaining, according to the interaction between the service request and the service management platform, a communication key used for encrypting a service when the vehicle transmits the service to the edge computing node includes:
sending a first key interaction request to the service management platform according to the service request;
receiving first confirmation information fed back by the service management platform according to the first key interaction request; the first acknowledgement information includes: a second random number generated by the service management platform;
and interacting with the service management platform according to the first confirmation information to obtain a communication key.
Optionally, the first key interaction request includes: the conversation comprises a conversation identifier, a vehicle identifier, vehicle position information and a first random number.
Optionally, the obtaining a communication key according to the interaction between the first confirmation information and the service management platform includes:
sending a second key interaction request to the service management platform according to the first confirmation information, wherein the second key interaction request is used for indicating the service management platform to generate a communication key;
and receiving the communication key fed back by the service management platform.
Optionally, the second key interaction request includes:
a third random number encrypted using the public key;
vehicle identification information encrypted using a negotiation key, the negotiation key enc _ key ═ Fuc (a first random number, a second random number, a third random number);
wherein the third random number is a random number generated by the vehicle service platform, and Fuc is a key generation function.
Optionally, generating the communication key includes:
and encrypting a fourth random number by using the negotiation key to obtain a key, wherein the fourth random number is a random number generated by the service management platform.
Optionally, the transceiver module 51 is further configured to send the communication key to the vehicle.
It should be noted that the apparatus is an apparatus corresponding to the above method, and all the implementations in the above method embodiment are applicable to the embodiment of the apparatus, and the same technical effects can be achieved.
An embodiment of the present invention further provides a vehicle service platform, including: the information interaction device is described above. All the implementation manners in the above method embodiment are applicable to this embodiment, and the same technical effect can be achieved.
The embodiment of the invention also provides an information interaction device, which is applied to the edge computing node, and the device comprises:
the receiving and sending module is used for receiving a request message of a vehicle; the request message is encrypted by using a communication key, and the communication key is obtained after the vehicle service platform interacts with the service management platform according to a service request sent by the vehicle;
the processing module is used for requesting a communication key from the service management platform according to the request message;
the receiving and sending module is also used for receiving the communication key issued by the service management platform.
Optionally, the processing module is further configured to decrypt a request message sent by the vehicle using the communication key.
Optionally, the transceiver module is further configured to disconnect a communication connection with the vehicle after the service with the vehicle is completed, and cancel the communication key.
It should be noted that the apparatus is an apparatus corresponding to the above method, and all the implementations in the above method embodiment are applicable to the embodiment of the apparatus, and the same technical effects can be achieved.
The embodiment of the invention also provides an edge computing node, which comprises the information interaction device. All the implementation manners in the above method embodiment are applicable to this embodiment, and the same technical effect can be achieved.
An embodiment of the present invention further provides a processing device, including: a processor, a memory storing a computer program which, when executed by the processor, performs the method as described above. All the implementation manners in the above method embodiment are applicable to this embodiment, and the same technical effect can be achieved.
Embodiments of the present invention also provide a computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the method as described above. All the implementation manners in the above method embodiment are applicable to this embodiment, and the same technical effect can be achieved.
Those of ordinary skill in the art will appreciate that the various illustrative elements and algorithm steps described in connection with the embodiments disclosed herein may be implemented as electronic hardware or combinations of computer software and electronic hardware. Whether such functionality is implemented as hardware or software depends upon the particular application and design constraints imposed on the implementation. Skilled artisans may implement the described functionality in varying ways for each particular application, but such implementation decisions should not be interpreted as causing a departure from the scope of the present invention.
It is clear to those skilled in the art that, for convenience and brevity of description, the specific working processes of the above-described systems, apparatuses and units may refer to the corresponding processes in the foregoing method embodiments, and are not described herein again.
In the embodiments provided in the present invention, it should be understood that the disclosed apparatus and method may be implemented in other ways. For example, the above-described apparatus embodiments are merely illustrative, and for example, the division of the units is only one logical division, and other divisions may be realized in practice, for example, a plurality of units or components may be combined or integrated into another system, or some features may be omitted, or not executed. In addition, the shown or discussed mutual coupling or direct coupling or communication connection may be an indirect coupling or communication connection through some interfaces, devices or units, and may be in an electrical, mechanical or other form.
The units described as separate parts may or may not be physically separate, and parts displayed as units may or may not be physical units, may be located in one place, or may be distributed on a plurality of network units. Some or all of the units can be selected according to actual needs to achieve the purpose of the solution of the embodiment.
In addition, functional units in the embodiments of the present invention may be integrated into one processing unit, or each unit may exist alone physically, or two or more units are integrated into one unit.
The functions, if implemented in the form of software functional units and sold or used as a stand-alone product, may be stored in a computer readable storage medium. Based on such understanding, the technical solution of the present invention may be embodied in the form of a software product, which is stored in a storage medium and includes instructions for causing a computer device (which may be a personal computer, a server, or a network device) to execute all or part of the steps of the method according to the embodiments of the present invention. And the aforementioned storage medium includes: various media capable of storing program codes, such as a U disk, a removable hard disk, a ROM, a RAM, a magnetic disk, or an optical disk.
Furthermore, it is to be noted that in the device and method of the invention, it is obvious that the individual components or steps can be decomposed and/or recombined. These decompositions and/or recombinations are to be regarded as equivalents of the present invention. Also, the steps of performing the series of processes described above may naturally be performed chronologically in the order described, but need not necessarily be performed chronologically, and some steps may be performed in parallel or independently of each other. It will be understood by those skilled in the art that all or any of the steps or elements of the method and apparatus of the present invention may be implemented in any computing device (including processors, storage media, etc.) or network of computing devices, in hardware, firmware, software, or any combination thereof, which can be implemented by those skilled in the art using their basic programming skills after reading the description of the present invention.
Thus, the objects of the invention may also be achieved by running a program or a set of programs on any computing device. The computing device may be a general purpose device as is well known. The object of the invention is thus also achieved solely by providing a program product comprising program code for implementing the method or the apparatus. That is, such a program product also constitutes the present invention, and a storage medium storing such a program product also constitutes the present invention. It is to be understood that the storage medium may be any known storage medium or any storage medium developed in the future. It is further noted that in the apparatus and method of the present invention, it is apparent that each component or step can be decomposed and/or recombined. These decompositions and/or recombinations are to be regarded as equivalents of the present invention. Also, the steps of executing the series of processes described above may naturally be executed chronologically in the order described, but need not necessarily be executed chronologically. Some steps may be performed in parallel or independently of each other.
While the foregoing is directed to the preferred embodiment of the present invention, it will be understood by those skilled in the art that various changes and modifications may be made without departing from the spirit and scope of the invention as defined in the appended claims.
Claims (10)
1. An information interaction method is applied to a vehicle service platform and comprises the following steps:
receiving a service request sent by a vehicle;
interacting with a service management platform according to the service request to obtain a communication key for encrypting the service when the vehicle transmits the service with the edge computing node;
interacting with a service management platform according to the service request to obtain a communication key for encrypting the service when a vehicle transmits the service with an edge computing node, wherein the method comprises the following steps:
sending a first key interaction request to the service management platform according to the service request;
receiving first confirmation information fed back by the service management platform according to the first key interaction request;
and interacting with the service management platform according to the first confirmation information to obtain a communication key.
2. The information interaction method according to claim 1, wherein the first confirmation information comprises: and the second random number is generated by the service management platform.
3. The information interaction method of claim 1, wherein the first key interaction request comprises: the conversation comprises a conversation identifier, a vehicle identifier, vehicle position information and a first random number.
4. The information interaction method of claim 1, wherein interacting with the service management platform according to the first confirmation information to obtain a communication key comprises:
sending a second key interaction request to the service management platform according to the first confirmation information, wherein the second key interaction request is used for indicating the service management platform to generate a communication key;
and receiving the communication key fed back by the service management platform.
5. The information interaction method of claim 4, wherein the second key interaction request comprises:
a third random number encrypted using the public key;
vehicle identification information encrypted using a negotiation key, the negotiation key enc _ key ═ Fuc (a first random number, a second random number, a third random number);
wherein the third random number is a random number generated by the vehicle service platform, and Fuc is a key generation function.
6. The information interaction method of claim 5, wherein generating the communication key comprises:
and encrypting a fourth random number by using the negotiation key to obtain a key, wherein the fourth random number is a random number generated by the service management platform.
7. An information interaction device, which is applied to a vehicle service platform, the device comprising:
the receiving and sending module is used for receiving a service request sent by a vehicle;
the processing module is used for interacting with a service management platform according to the service request to obtain a communication key for encrypting the service when the vehicle and the edge computing node transmit the service;
the processing module is further configured to:
sending a first key interaction request to the service management platform according to the service request;
receiving first confirmation information fed back by the service management platform according to the first key interaction request;
and interacting with the service management platform according to the first confirmation information to obtain a communication key.
8. A vehicle service platform, comprising: the information interaction device of claim 7.
9. A processing device, comprising: processor, memory storing a computer program which, when executed by the processor, performs the method of any of claims 1 to 6.
10. A computer-readable storage medium storing instructions that, when executed on a computer, cause the computer to perform the method of any one of claims 1 to 6.
Priority Applications (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110371375.9A CN113079488B (en) | 2021-04-07 | 2021-04-07 | Information interaction method, device and equipment |
Applications Claiming Priority (1)
| Application Number | Priority Date | Filing Date | Title |
|---|---|---|---|
| CN202110371375.9A CN113079488B (en) | 2021-04-07 | 2021-04-07 | Information interaction method, device and equipment |
Publications (2)
| Publication Number | Publication Date |
|---|---|
| CN113079488A CN113079488A (en) | 2021-07-06 |
| CN113079488B true CN113079488B (en) | 2022-02-18 |
Family
ID=76615238
Family Applications (1)
| Application Number | Title | Priority Date | Filing Date |
|---|---|---|---|
| CN202110371375.9A Active CN113079488B (en) | 2021-04-07 | 2021-04-07 | Information interaction method, device and equipment |
Country Status (1)
| Country | Link |
|---|---|
| CN (1) | CN113079488B (en) |
Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107959708A (en) * | 2017-10-24 | 2018-04-24 | 北京邮电大学 | A kind of car networking service collaboration computational methods and system based on high in the clouds-marginal end-car end |
| CN108307349A (en) * | 2017-12-29 | 2018-07-20 | 中国银联股份有限公司 | Wireless payment method between vehicle and vehicle based on 5G communication networks and its system |
| CN110098947A (en) * | 2018-01-31 | 2019-08-06 | 华为技术有限公司 | A kind of dispositions method of application, equipment and system |
| CN110839207A (en) * | 2018-08-17 | 2020-02-25 | 广州汽车集团股份有限公司 | Navigation method, device, system, computer equipment and storage medium |
| CN111163453A (en) * | 2018-11-07 | 2020-05-15 | 航天信息股份有限公司 | Emergency vehicle response method and equipment |
| CN111477001A (en) * | 2020-03-04 | 2020-07-31 | 中国联合网络通信有限公司广州市分公司 | Traffic signal acquisition and management system based on 5G and MEC |
-
2021
- 2021-04-07 CN CN202110371375.9A patent/CN113079488B/en active Active
Patent Citations (6)
| Publication number | Priority date | Publication date | Assignee | Title |
|---|---|---|---|---|
| CN107959708A (en) * | 2017-10-24 | 2018-04-24 | 北京邮电大学 | A kind of car networking service collaboration computational methods and system based on high in the clouds-marginal end-car end |
| CN108307349A (en) * | 2017-12-29 | 2018-07-20 | 中国银联股份有限公司 | Wireless payment method between vehicle and vehicle based on 5G communication networks and its system |
| CN110098947A (en) * | 2018-01-31 | 2019-08-06 | 华为技术有限公司 | A kind of dispositions method of application, equipment and system |
| CN110839207A (en) * | 2018-08-17 | 2020-02-25 | 广州汽车集团股份有限公司 | Navigation method, device, system, computer equipment and storage medium |
| CN111163453A (en) * | 2018-11-07 | 2020-05-15 | 航天信息股份有限公司 | Emergency vehicle response method and equipment |
| CN111477001A (en) * | 2020-03-04 | 2020-07-31 | 中国联合网络通信有限公司广州市分公司 | Traffic signal acquisition and management system based on 5G and MEC |
Also Published As
| Publication number | Publication date |
|---|---|
| CN113079488A (en) | 2021-07-06 |
Similar Documents
| Publication | Publication Date | Title |
|---|---|---|
| CN109862040B (en) | Security authentication method and authentication system | |
| US11496451B2 (en) | Systems and methods for encrypted vehicle data service exchanges | |
| CN111049660B (en) | Certificate distribution method, system, device and equipment, and storage medium | |
| CN110380852B (en) | Bidirectional authentication method and communication system | |
| EP3723399A1 (en) | Identity verification method and apparatus | |
| CN101156352B (en) | Authentication method, system and authentication center based on mobile network P2P communication | |
| US20180270052A1 (en) | Cryptographic key distribution | |
| CN112039918B (en) | Internet of things credible authentication method based on identification cryptographic algorithm | |
| CN101112038A (en) | User authentication and authorization in communication system | |
| CN110324335B (en) | Automobile software upgrading method and system based on electronic mobile certificate | |
| CN110381145B (en) | Interaction method and system between electric automobile and power grid | |
| KR20080089500A (en) | Authentication method, system and authentication center based on end to end communication in the mobile network | |
| EP3565213B1 (en) | Systems and methods for a secure subscription based vehicle data service | |
| CN110768938A (en) | Vehicle safety communication method and device | |
| CN113015159B (en) | Initial security configuration method, security module and terminal | |
| CN112235235A (en) | SDP authentication protocol implementation method based on state cryptographic algorithm | |
| EP3148152A1 (en) | Cryptographic key distribution | |
| CN114390524B (en) | Method and device for realizing one-key login service | |
| CN107135228B (en) | Authentication system and authentication method based on central node | |
| CN113079488B (en) | Information interaction method, device and equipment | |
| CN114095919A (en) | Certificate authorization processing method based on Internet of vehicles and related equipment | |
| CN101599878A (en) | Re-authentication method, system and authentication device | |
| CN114158046B (en) | Method and device for realizing one-key login service | |
| CN113660271B (en) | Security authentication method and device for Internet of vehicles | |
| CN114124513B (en) | Identity authentication method, system, device, electronic equipment and readable medium |
Legal Events
| Date | Code | Title | Description |
|---|---|---|---|
| PB01 | Publication | ||
| PB01 | Publication | ||
| SE01 | Entry into force of request for substantive examination | ||
| SE01 | Entry into force of request for substantive examination | ||
| GR01 | Patent grant | ||
| GR01 | Patent grant |